A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-1442.json"